Sebastian Gierlinger 90176e1f40 Security improvements ... no issue - added CSRF protection - changed session handling to express.session - changed session handling to change session id - added config property useCookieSession - added file extension check for /ghost/upload - removed /ghost/debug/db/reset		2013-10-17 15:28:28 +02:00
..
controllers	Security improvements	2013-10-17 15:28:28 +02:00
data	Merge pull request #923 from ErisDS/0.3.1-wip-mysql	2013-09-27 05:04:45 -07:00
helpers	Merge pull request #996 from ErisDS/0.3.2-tagfixes	2013-10-10 07:05:15 -07:00
models	Swapping escape to sanitze	2013-10-09 19:13:16 +01:00
permissions	Cleanup indentation and quotes	2013-09-26 15:06:31 +01:00
plugins	Cleanup indentation and quotes	2013-09-26 15:06:31 +01:00
views	Security improvements	2013-10-17 15:28:28 +02:00
api.js	Merge branch '0.3.1-wip'	2013-09-27 17:22:55 +01:00
errorHandling.js	Cleanup indentation and quotes	2013-09-26 15:06:31 +01:00
mail.js	Change from address	2013-10-11 12:49:33 +01:00
middleware.js	Lock down theme static directory to not serve templates, markdown and text files.	2013-10-11 18:05:31 +01:00
require-tree.js	Cleanup indentation and quotes	2013-09-26 15:06:31 +01:00